Privacy policy

Name: Pixellab-Media
Address: Gewerbering 19/1/1, Grafenwörth, Niederösterreich, 3484, AT
Telephone: +43 670 659 87 69

This is a translation for your convenience. Only the German version is legally binding.

Pixellab-Media Schneider & Schmied OG – as of October 2026

1. Controller

Pixellab-Media Schneider & Schmied OG
Bryan Paul Schmied, Paul Schneider
Offene Gesellschaft (general partnership)
VAT number: ATU83449458
FN 680330 k, Landesgericht St. Pölten
Gewerbering 19/1/1, 3484 Grafenwörth, Austria
Email: contact@pixellab-media.com
Phone: +43 670 659 87 69

2. General information on data processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG 2021). Protecting our users’ data is important to us.

3. Legal bases for processing

Art. 6(1)(a) GDPR – consent
Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures
Art. 6(1)(c) GDPR – legal obligation
Art. 6(1)(f) GDPR – legitimate interest
§ 165(3) TKG 2021 – storing of and access to information on the end device

4. Categories of data processed

Master data (name, company, email address, phone number)
Communication data (content from contact requests and the enquiry form)
Contract and billing data (when an order is placed)
Photo and video material from assignments (when an order is placed)
Server log data (IP address, time stamp, browser data, etc.)

5. Data collected when you visit the website

When you visit our website, technical data is collected automatically:

IP address
Date and time of access
Pages visited
Browser type and version
Operating system
Referrer URL

This processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

6. Cookies, fonts and analytics

This website does not set cookies and does not use any analytics or tracking services. Fonts, images and the video on the home page are loaded from our own web space. Apart from our hosting provider (see section 9), no connection to third-party servers is made when a page is opened.

Third-party content is only loaded when you click on an embedded YouTube video or a 360° tour, or zoom the world map (see sections 10 to 12). From that point on, the respective providers may set cookies and store data on your device.

If you switch between the light and dark design using the button in the header, we store this choice in your browser’s local storage (localStorage) so that it is kept the next time you open a page. This information does not leave your device and is not transmitted to us or to third parties. You can delete it at any time in your browser settings. Storing it is strictly necessary for this function you requested (§ 165(3) TKG 2021).

7. Enquiry form

If you contact us via our enquiry form, the following data is processed:

Name
Email address
Company
Phone number
Details of the desired project (e.g. service, scope, date)
Your message
the address of the page from which you send the enquiry

Name, email address and, in the general enquiry form, the message are required. Without them we cannot handle your enquiry. All other details are optional.

This processing takes place in accordance with Art. 6(1)(b) GDPR in order to handle your enquiry and prepare a quote.

The details are sent to us by email via the form service Web3Forms. The provider is Web3Creative, based in India, which processes your details on our behalf (data processing agreement under Art. 28 GDPR). There is no adequacy decision of the European Commission for India; the transfer is based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). Among others, Web3Creative uses Amazon Web Services, Cloudflare and Hetzner (Germany, Finland). To block spam, your IP address and email address are transmitted to the spam filters CleanTalk Inc. and Automattic Inc. (Akismet) in the USA. Web3Forms deletes stored enquiries after 30 days.

Web3Forms privacy notice: https://web3forms.com/privacy

8. Contact by email, phone or WhatsApp

If you contact us by email or phone, we store your data in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR).

If you write to us via WhatsApp, WhatsApp Ireland Limited also processes your data in accordance with its own privacy policy. The connection to WhatsApp is only established when you click the link.

9. Hosting

Our website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes technical data (e.g. server logs, IP addresses) on our behalf in order to deliver and secure the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare.

Data may be transferred to the USA in the process. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) or on standard contractual clauses (Art. 46 GDPR).

Further information: https://www.cloudflare.com/privacypolicy/

10. Embedded videos (YouTube)

We embed videos from the YouTube platform on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com).

A video is only loaded when you click on its preview image. Before that, no connection to YouTube is established; the preview images are stored on our own web space. When a video is played, a connection to YouTube’s servers is established. Among other things, your IP address and the page you visited are transmitted to YouTube. If you are logged in to your Google account, YouTube can associate your browsing behaviour with your profile. A transfer to Google LLC in the USA is possible; it takes place on the basis of the EU-US Data Privacy Framework.

The video is only embedded with your consent, which you give by clicking on the preview image (Art. 6(1)(a) GDPR, § 165(3) TKG 2021).

YouTube privacy policy: https://policies.google.com/privacy

11. 360° tours (Matterport)

We embed 360° tours from the Matterport platform on our website. Matterport is based in the USA and belongs to the CoStar Group.

A tour is only loaded when you click on it. Among other things, your IP address and technical data about your device are transmitted to Matterport; a transfer to the USA is possible.

The tour is only embedded with your consent, which you give by clicking (Art. 6(1)(a) GDPR, § 165(3) TKG 2021).

Matterport (CoStar Group) privacy notice: https://www.costar.com/about/privacy-notice

12. Map (OpenStreetMap)

On the “Portfolio” and “World map” pages we show a world map. When the page is opened, it is an image stored on our own web space. If you zoom the map, we load an interactive map. Its map images come from the servers of OpenStreetMap Germany, operated by FOSSGIS e.V., Bundesallee 23, 10717 Berlin, Germany.

The interactive map is only loaded when you click “+”, “−” or a grouped cluster of places. Before that, no connection to these servers is established. With the click, your IP address, browser type and version, operating system, the page visited and the date and time, among other things, are transmitted to FOSSGIS e.V. According to the operator, no cookies are set in the process.

The map is only embedded with your consent, which you give by clicking (Art. 6(1)(a) GDPR, § 165(3) TKG 2021).

OpenStreetMap Germany privacy policy: https://www.openstreetmap.de/impressum/datenschutz/

13. Google reviews

On our home page we show a selection of the reviews that customers have posted publicly on our Google Business Profile: the name shown there, the star rating and the text. We have copied the reviews as text; no connection to Google is made when the page is opened.

This processing is based on our legitimate interest in showing prospective customers the experiences of other customers with our services (Art. 6(1)(f) GDPR). If you do not want your review to appear here, a short message to contact@pixellab-media.com is enough and we will remove it from our website.

14. Use of artificial intelligence (AI) in our productions

In our photo and video productions we partly use AI-supported tools. This applies in particular to:

Image optimisation: AI-supported editing such as noise reduction, sharpening, upscaling, colour correction and retouching
Video effects and transitions: creating transitions and effects with the service Higgsfield (Higgsfield AI, San Francisco, USA)

The AI serves to technically and creatively optimise the material we have captured. We do not create content that deceptively alters real people, places or events without explicit agreement, and we label it in accordance with legal requirements (in particular Art. 50 of the EU AI Act).

If photo or video material is transmitted to cloud-based AI services for editing, this may also include personal data (e.g. recognisable people). With Higgsfield, processing takes place on servers in the USA or with its technical service providers. The processing serves to fulfil the respective assignment (Art. 6(1)(b) GDPR) or is based on our legitimate interest in modern and efficient editing (Art. 6(1)(f) GDPR). At our clients’ request we do without cloud-based AI services.

Higgsfield privacy policy: https://higgsfield.ai/privacy-policy

Our website contains links to our Instagram profile and our YouTube channel. Data is only transmitted to Meta Platforms Ireland Ltd. or Google Ireland Limited when you actively click on them.

Instagram privacy policy:
https://privacycenter.instagram.com/policy

16. Recipients of data

Your data is only passed on:

with your consent,
if it is necessary to perform a contract,
if there is a legal obligation,
if there is a legitimate interest.

Recipients may in particular be our hosting provider (Cloudflare), the form service (Web3Forms), our email provider (World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, 4020 Linz, Austria), AI services we use (see section 14), our tax advisers and authorities within the scope of legal obligations.

17. Storage period

Data is only stored for as long as the respective purpose or legal obligations require. In detail:

Enquiries that do not lead to an order: up to 12 months after the end of the communication
Contract and billing data: 7 years pursuant to § 132 BAO (Austrian Federal Fiscal Code) and § 212 UGB, and beyond that until the end of any legal disputes
Server log data: according to the requirements of our hosting provider
Enquiries at the form service Web3Forms: 30 days (see section 7)
Your choice of light or dark design: until you delete it in your browser

18. Data security

We use technical and organisational measures to protect data against loss, misuse and unauthorised access (e.g. SSL/TLS encryption).

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

You have the right to:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction (Art. 18 GDPR)
data portability (Art. 20 GDPR)
object (Art. 21 GDPR)
withdraw consent given (Art. 7(3) GDPR)

Contact for exercising your rights:
contact@pixellab-media.com

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde (Data Protection Authority), Barichgasse 40–42, 1030 Vienna:
https://www.dsb.gv.at